Security Audit Event Category
The Security Audit event category has the event classes described in the following table.
Records all new connection events since the trace started, such as when a client requested a connection to a server running an instance of Microsoft SQL Server Analysis Services.
Records all new disconnect events since the trace started, such as when a client issues a disconnect command.
Audit Server Starts and Stops
Records shutdown, start, and pause activities for services.
Audit Object Permission Event
Records all object permission changes.
Audit Admin Operations Event
Records server operations for backup, restore, synchronize, attach, detach, image load, and image save.
For information about the columns associated with each of the Security Audit event classes, see Security Audit Data Columns.